Skip to content

unsupported FVE metadata entry version! #74

@dunkhong

Description

@dunkhong

Hello,

When I used bdeinfo on debian,
I got the followed :

bdeinfo 20240625

Reading BitLocker volume header:
libbde_volume_header_read_file_io_handle: reading volume header at offset: 0 (0x00000000)
libbde_volume_header_read_data: volume header data:
00000000: eb 58 90 2d 46 56 45 2d 46 53 2d 00 02 08 00 00 .X.-FVE- FS-.....
00000010: 00 00 00 00 00 f8 00 00 3f 00 ff 00 00 a8 08 00 ........ ?.......
00000020: 00 00 00 00 e0 1f 00 00 00 00 00 00 00 00 00 00 ........ ........
00000030: 01 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
00000040: 80 00 29 00 00 00 00 4e 4f 20 4e 41 4d 45 20 20 ..)....N O NAME
00000050: 20 20 46 41 54 33 32 20 20 20 33 c9 8e d1 bc f4 FAT32 3.....
00000060: 7b 8e c1 8e d9 bd 00 7c a0 fb 7d b4 7d 8b f0 ac {......| ..}.}...
00000070: 98 40 74 0c 48 74 0e b4 0e bb 07 00 cd 10 eb ef .@t.Ht.. ........
00000080: a0 fd 7d eb e6 cd 16 cd 19 00 00 00 00 00 00 00 ..}..... ........
00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
000000a0: 3b d6 67 49 29 2e d8 4a 83 99 f6 a3 39 e3 d0 01 ;.gI)..J ....9...
000000b0: 00 80 5d 33 00 00 00 00 00 20 27 4f 00 00 00 00 ..]3.... . 'O....
000000c0: 00 40 86 89 00 00 00 00 00 00 00 00 00 00 00 00 .@...... ........
000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
...
000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
00000100: 0d 0a 52 65 6d 6f 76 65 20 64 69 73 6b 73 20 6f ..Remove disks o
00000110: 72 20 6f 74 68 65 72 20 6d 65 64 69 61 2e ff 0d r other media...
00000120: 0a 44 69 73 6b 20 65 72 72 6f 72 ff 0d 0a 50 72 .Disk er ror...Pr
00000130: 65 73 73 20 61 6e 79 20 6b 65 79 20 74 6f 20 72 ess any key to r
00000140: 65 73 74 61 72 74 0d 0a 00 00 00 00 00 00 00 00 estart.. ........
00000150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
...
00000180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
00000190: 00 00 00 00 00 00 00 00 78 78 78 78 78 78 78 78 ........ xxxxxxxx
000001a0: 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 xxxxxxxx xxxxxxxx
...
000001d0: 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 xxxxxxxx xxxxxxxx
000001e0: 78 78 78 78 78 78 78 78 ff ff ff ff ff ff ff ff xxxxxxxx ........
000001f0: ff ff ff ff ff ff ff ff ff ff ff 00 1f 2c 55 aa ........ .....,U.

libbde_volume_header_read_data: boot entry point:
00000000: eb 58 90 .X.

libbde_volume_header_read_data: signature : -FVE-FS-
libbde_volume_header_read_data: bytes per sector : 512
libbde_volume_header_read_data: sectors per cluster block : 8
libbde_volume_header_read_data: unknown1
00000000: 00 00 00 00 00 .....

libbde_volume_header_read_data: total number of sectors (16-bit) : 0
libbde_volume_header_read_data: media descriptor : 0xf8
libbde_volume_header_read_data: unknown2 : 0
libbde_volume_header_read_data: sectors per track : 63
libbde_volume_header_read_data: number of heads : 255
libbde_volume_header_read_data: number of hidden sectors : 567296
libbde_volume_header_read_data: total number of sectors (32-bit) : 0
libbde_volume_header_read_data: unknown4:
00000000: e0 1f 00 00 00 00 00 00 00 00 00 00 01 00 06 00 ........ ........
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 80 00 29 ........ ......)

libbde_volume_header_read_data: unknown4a : 0x00001fe0 (8160)
libbde_volume_header_read_data: unknown4b : 0x00000000 (0)
libbde_volume_header_read_data: unknown4c : 0x0001 (1)
libbde_volume_header_read_data: unknown4d : 0x0006 (6)
libbde_volume_header_read_data: unknown4e : 0x00000000 (0)
libbde_volume_header_read_data: unknown4f : 0x00000000 (0)
libbde_volume_header_read_data: drive physical number : 0x80
libbde_volume_header_read_data: unknown4g : 0x00
libbde_volume_header_read_data: extended boot signature : 0x29

libbde_volume_header_read_data: volume serial number : 0x00000000
libbde_volume_header_read_data: volume label : NO NAME
libbde_volume_header_read_data: file system signature : FAT32
libbde_volume_header_read_data: bootcode
00000000: 33 c9 8e d1 bc f4 7b 8e c1 8e d9 bd 00 7c a0 fb 3.....{. .....|..
00000010: 7d b4 7d 8b f0 ac 98 40 74 0c 48 74 0e b4 0e bb }.}....@ t.Ht....
00000020: 07 00 cd 10 eb ef a0 fd 7d eb e6 cd 16 cd 19 ........ }......

libbde_volume_header_read_data: identifier : 4967d63b-2e29-4ad8-8399-f6a339e3d001
libbde_volume_header_read_data: first metadata offset : 0x335d8000
libbde_volume_header_read_data: second metadata offset : 0x4f272000
libbde_volume_header_read_data: third metadata offset : 0x89864000
libbde_volume_header_read_data: unknown5:
00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
00000030: 00 00 00 00 00 00 00 00 0d 0a 52 65 6d 6f 76 65 ........ ..Remove
00000040: 20 64 69 73 6b 73 20 6f 72 20 6f 74 68 65 72 20 disks o r other
00000050: 6d 65 64 69 61 2e ff 0d 0a 44 69 73 6b 20 65 72 media... .Disk er
00000060: 72 6f 72 ff 0d 0a 50 72 65 73 73 20 61 6e 79 20 ror...Pr ess any
00000070: 6b 65 79 20 74 6f 20 72 65 73 74 61 72 74 0d 0a key to r estart..
00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
000000d0: 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 xxxxxxxx xxxxxxxx
000000e0: 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 xxxxxxxx xxxxxxxx
000000f0: 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 xxxxxxxx xxxxxxxx
00000100: 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 xxxxxxxx xxxxxxxx
00000110: 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 xxxxxxxx xxxxxxxx
00000120: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ........ ........
00000130: ff ff ff 00 1f 2c .....,

libbde_volume_header_read_data: sector signature : 0xaa55

libbde_volume_header_read_data: volume size : 0

Reading BitLocker primary metadata block:
libbde_metadata_read_block: reading metadata block header at offset: 861765632 (0x335d8000)
libbde_metadata_block_header_read_data: FVE metadata block header:
00000000: 2d 46 56 45 2d 46 53 2d 79 00 02 00 04 00 04 00 -FVE-FS- y.......
00000010: 00 00 60 36 ee 00 00 00 00 00 00 00 10 00 00 00 ..`6.... ........
00000020: 00 80 5d 33 00 00 00 00 00 20 27 4f 00 00 00 00 ..]3.... . 'O....
00000030: 00 40 86 89 00 00 00 00 00 70 2c 1f 00 00 00 00 .@...... .p,.....

libbde_metadata_block_header_read_data: signature : -FVE-FS-
libbde_metadata_block_header_read_data: unknown size : 121
libbde_metadata_block_header_read_data: format version : 2
libbde_metadata_block_header_read_data: unknown1 : 4
libbde_metadata_block_header_read_data: unknown2 : 4
libbde_metadata_block_header_read_data: encrypted volume size : 1023114477568
libbde_metadata_block_header_read_data: unknown3 : 0
libbde_metadata_block_header_read_data: number of volume header sectors : 16
libbde_metadata_block_header_read_data: first metadata offset : 0x335d8000
libbde_metadata_block_header_read_data: second metadata offset : 0x4f272000
libbde_metadata_block_header_read_data: third metadata offset : 0x89864000
libbde_metadata_block_header_read_data: volume header offset : 0x1f2c7000

libbde_metadata_read_block: reading metadata header at offset: 861765696 (0x335d8040)
libbde_metadata_header_read_data: FVE metadata header:
00000000: 44 07 00 00 01 00 00 00 30 00 00 00 44 07 00 00 D....... 0...D...
00000010: 4e cc f5 b2 57 32 2f 4c 81 ae be c0 bd 26 e1 db N...W2/L .....&..
00000020: 23 00 00 00 04 80 00 00 29 df 14 3a be 8e db 01 #....... )..:....

libbde_metadata_header_read_data: metadata size : 1860
libbde_metadata_header_read_data: format version : 1
libbde_metadata_header_read_data: header size : 48
libbde_metadata_header_read_data: metadata size copy : 1860
libbde_metadata_header_read_data: volume identifier : b2f5cc4e-3257-4c2f-81ae-bec0bd26e1db
libbde_metadata_header_read_data: next nonce counter : 0x00000023
libbde_metadata_header_read_data: encryption method : 0x00008004 (AES-XTS 128-bit encryption)
libbde_metadata_header_read_data: encryption method copy : 0x00000000 (None)
libbde_metadata_header_read_data: creation time : Mar 06, 2025 17:36:00.693840900 UTC

libbde_metadata_entry_read: FVE metadata entry:
00000000: 4c 00 07 00 02 00 01 00 L.......

libbde_metadata_entry_read: entry size : 76
libbde_metadata_entry_read: entry type : 0x0007 (Description)
libbde_metadata_entry_read: value type : 0x0002 (Unicode string (UTF-16 little-endian))
libbde_metadata_entry_read: version : 1
libbde_metadata_entry_read: FVE metadata entry data:
00000000: 4e 00 41 00 4e 00 41 00 50 00 41 00 50 00 41 00 N.A.N.A. P.A.P.A.
00000010: 53 00 45 00 43 00 4f 00 4e 00 44 00 20 00 57 00 S.E.C.O. N.D. .W.
00000020: 69 00 6e 00 64 00 6f 00 77 00 73 00 20 00 32 00 i.n.d.o. w.s. .2.
00000030: 30 00 32 00 35 00 2f 00 30 00 33 00 2f 00 30 00 0.2.5./. 0.3./.0.
00000040: 37 00 00 00 7...

libbde_metadata_entry_read_string: string : NANAPAPASECOND Windows 2025/03/07

libbde_metadata_entry_read: FVE metadata entry:
00000000: 50 00 03 00 05 00 01 00 P.......

libbde_metadata_entry_read: entry size : 80
libbde_metadata_entry_read: entry type : 0x0003 (Full volume encryption key (FVEK))
libbde_metadata_entry_read: value type : 0x0005 (AES-CCM encrypted key)
libbde_metadata_entry_read: version : 1
libbde_metadata_entry_read: FVE metadata entry data:
00000000: f0 2e 7a 23 76 9a db 01 1c 00 00 00 b3 89 c3 a8 ..z#v... ........
00000010: 12 a3 31 9c ff e6 b3 a3 6a d3 f0 d6 f8 09 1b b3 ..1..... j.......
00000020: 28 c9 f0 d3 a6 a3 60 ed a3 d7 2b ce 93 f0 b2 e4 (...... ..+..... 00000030: 89 7e fa 28 97 ba 29 e6 31 81 97 62 ad 60 f1 0c .~.(..). 1..b...
00000040: 4e ee 72 65 62 49 d0 5a N.rebI.Z

libbde_aes_ccm_encrypted_key_read: nonce time : Mar 21, 2025 15:30:12.959000000 UTC
libbde_aes_ccm_encrypted_key_read: nonce counter : 28
libbde_aes_ccm_encrypted_key_read: encrypted data:
00000000: b3 89 c3 a8 12 a3 31 9c ff e6 b3 a3 6a d3 f0 d6 ......1. ....j...
00000010: f8 09 1b b3 28 c9 f0 d3 a6 a3 60 ed a3 d7 2b ce ....(... .....+. 00000020: 93 f0 b2 e4 89 7e fa 28 97 ba 29 e6 31 81 97 62 .....~.( ..).1..b 00000030: ad 60 f1 0c 4e ee 72 65 62 49 d0 5a ...N.re bI.Z

libbde_metadata_entry_read: FVE metadata entry:
00000000: 50 00 0b 00 05 00 01 00 P.......

libbde_metadata_entry_read: entry size : 80
libbde_metadata_entry_read: entry type : 0x000b (UNKNOWN)
libbde_metadata_entry_read: value type : 0x0005 (AES-CCM encrypted key)
libbde_metadata_entry_read: version : 1
libbde_metadata_entry_read: FVE metadata entry data:
00000000: f0 2e 7a 23 76 9a db 01 1d 00 00 00 53 2b 87 d6 ..z#v... ....S+..
00000010: e1 33 0e 55 d0 8f 0b 34 97 93 e6 ce a7 8a e6 ba .3.U...4 ........
00000020: 0b 9e 49 18 55 6b c3 e9 90 96 81 f7 e8 1d 54 c0 ..I.Uk.. ......T.
00000030: 28 60 2c 7f 53 ab 9c 8a a2 99 a4 7e 7e 2c 5a cf (`,.S... ...~~,Z.
00000040: 98 a9 52 8f 21 05 51 d9 ..R.!.Q.

libbde_aes_ccm_encrypted_key_read: nonce time : Mar 21, 2025 15:30:12.959000000 UTC
libbde_aes_ccm_encrypted_key_read: nonce counter : 29
libbde_aes_ccm_encrypted_key_read: encrypted data:
00000000: 53 2b 87 d6 e1 33 0e 55 d0 8f 0b 34 97 93 e6 ce S+...3.U ...4....
00000010: a7 8a e6 ba 0b 9e 49 18 55 6b c3 e9 90 96 81 f7 ......I. Uk......
00000020: e8 1d 54 c0 28 60 2c 7f 53 ab 9c 8a a2 99 a4 7e ..T.(`,. S......~
00000030: 7e 2c 5a cf 98 a9 52 8f 21 05 51 d9 ~,Z...R. !.Q.

libbde_metadata_entry_read: FVE metadata entry:
00000000: 3c 01 02 00 08 00 01 00 <.......

libbde_metadata_entry_read: entry size : 316
libbde_metadata_entry_read: entry type : 0x0002 (Volume master key (VMK))
libbde_metadata_entry_read: value type : 0x0008 (Volume master key)
libbde_metadata_entry_read: version : 1
libbde_metadata_entry_read: FVE metadata entry data:
00000000: 71 88 a2 5f 29 89 17 41 bb c9 85 92 45 a0 dd ab q.._)..A ....E...
00000010: 40 2e 12 8f c0 8e db 01 00 00 00 08 ac 00 00 00 @....... ........
00000020: 03 00 01 00 00 10 00 00 94 9e 73 59 c5 60 2d 48 ........ ..sY.-H 00000030: 48 de 72 bb 43 20 05 a9 40 00 12 00 05 00 01 00 H.r.C .. @....... 00000040: f0 2e 7a 23 76 9a db 01 1e 00 00 00 82 e4 f7 e0 ..z#v... ........ 00000050: e9 7e 99 f1 4c 13 62 14 92 40 c4 60 ee 0a 28 50 .~..L.b. .@...(P
00000060: 35 ca 15 5a 15 01 e6 ac 4f c6 c0 55 7c cc 0b 0e 5..Z.... O..U|...
00000070: e8 9f 3f b2 29 f9 ad 52 50 00 13 00 05 00 01 00 ..?.)..R P.......
00000080: f0 2e 7a 23 76 9a db 01 1f 00 00 00 dd c7 43 17 ..z#v... ......C.
00000090: d6 f1 2c a7 ef 61 69 48 a0 a7 93 01 0e 13 2a b7 ..,..aiH ......*.
000000a0: 58 d3 a1 c1 77 73 f3 52 ff 87 34 c7 93 3c b8 ef X...ws.R ..4..<..
000000b0: 7d 6b ba 9d ad 42 a5 85 b0 30 2b b9 e7 9e 3c 61 }k...B.. .0+...<a
000000c0: df 0a 9a 9a 05 27 b4 a1 50 00 00 00 05 00 01 00 .....'.. P.......
000000d0: f0 2e 7a 23 76 9a db 01 20 00 00 00 de 80 20 7f ..z#v... ..... .
000000e0: f3 d6 b0 0a 7c 3c f0 0b 4c 72 67 4c 43 7c 37 4a ....|<.. LrgLC|7J
000000f0: b1 7c 1a a0 4e b6 13 4f 85 da 66 a6 fd 5f 78 af .|..N..O ..f.._x.
00000100: fc 09 83 f8 b9 7a 4c 87 43 88 32 86 b3 80 51 40 .....zL. C.2...Q@
00000110: ba 22 91 86 f1 15 9a e2 1c 00 00 00 15 00 01 00 ."...... ........
00000120: 70 a3 12 8f c0 8e db 01 30 5b 7b 90 c0 8e db 01 p....... 0[{.....
00000130: 02 00 02 00 ....

libbde_volume_master_key_read: identifier : 5fa28871-8929-4117-bbc9-859245a0ddab
libbde_volume_master_key_read: modification time : Mar 06, 2025 17:52:42.276000000 UTC
libbde_volume_master_key_read: unknown1 : 0
libbde_volume_master_key_read: protection type : 0x0800 (recovery password protected)

libbde_metadata_entry_read: FVE metadata entry:
00000000: ac 00 00 00 03 00 01 00 ........

libbde_metadata_entry_read: entry size : 172
libbde_metadata_entry_read: entry type : 0x0000 (Property)
libbde_metadata_entry_read: value type : 0x0003 (Stretch key)
libbde_metadata_entry_read: version : 1
libbde_metadata_entry_read: FVE metadata entry data:
00000000: 00 10 00 00 94 9e 73 59 c5 60 2d 48 48 de 72 bb ......sY .-HH.r. 00000010: 43 20 05 a9 40 00 12 00 05 00 01 00 f0 2e 7a 23 C ..@... ......z# 00000020: 76 9a db 01 1e 00 00 00 82 e4 f7 e0 e9 7e 99 f1 v....... .....~.. 00000030: 4c 13 62 14 92 40 c4 60 ee 0a 28 50 35 ca 15 5a L.b..@. ..(P5..Z
00000040: 15 01 e6 ac 4f c6 c0 55 7c cc 0b 0e e8 9f 3f b2 ....O..U |.....?.
00000050: 29 f9 ad 52 50 00 13 00 05 00 01 00 f0 2e 7a 23 )..RP... ......z#
00000060: 76 9a db 01 1f 00 00 00 dd c7 43 17 d6 f1 2c a7 v....... ..C...,.
00000070: ef 61 69 48 a0 a7 93 01 0e 13 2a b7 58 d3 a1 c1 .aiH.... ..*.X...
00000080: 77 73 f3 52 ff 87 34 c7 93 3c b8 ef 7d 6b ba 9d ws.R..4. .<..}k..
00000090: ad 42 a5 85 b0 30 2b b9 e7 9e 3c 61 df 0a 9a 9a .B...0+. ..<a....
000000a0: 05 27 b4 a1 .'..

libbde_stretch_key_read: encryption method : 0x00001000 (UNKNOWN)
libbde_stretch_key_read: salt:
00000000: 94 9e 73 59 c5 60 2d 48 48 de 72 bb 43 20 05 a9 ..sY.`-H H.r.C ..

libbde_stretch_key_read: encrypted data:
00000000: 40 00 12 00 05 00 01 00 f0 2e 7a 23 76 9a db 01 @....... ..z#v...
00000010: 1e 00 00 00 82 e4 f7 e0 e9 7e 99 f1 4c 13 62 14 ........ .~..L.b.
00000020: 92 40 c4 60 ee 0a 28 50 35 ca 15 5a 15 01 e6 ac .@.`..(P 5..Z....
00000030: 4f c6 c0 55 7c cc 0b 0e e8 9f 3f b2 29 f9 ad 52 O..U|... ..?.)..R
00000040: 50 00 13 00 05 00 01 00 f0 2e 7a 23 76 9a db 01 P....... ..z#v...
00000050: 1f 00 00 00 dd c7 43 17 d6 f1 2c a7 ef 61 69 48 ......C. ..,..aiH
00000060: a0 a7 93 01 0e 13 2a b7 58 d3 a1 c1 77 73 f3 52 ......*. X...ws.R
00000070: ff 87 34 c7 93 3c b8 ef 7d 6b ba 9d ad 42 a5 85 ..4..<.. }k...B..
00000080: b0 30 2b b9 e7 9e 3c 61 df 0a 9a 9a 05 27 b4 a1 .0+...<a .....'..

libbde_metadata_entry_read: FVE metadata entry:
00000000: 50 00 00 00 05 00 01 00 P.......

libbde_metadata_entry_read: entry size : 80
libbde_metadata_entry_read: entry type : 0x0000 (Property)
libbde_metadata_entry_read: value type : 0x0005 (AES-CCM encrypted key)
libbde_metadata_entry_read: version : 1
libbde_metadata_entry_read: FVE metadata entry data:
00000000: f0 2e 7a 23 76 9a db 01 20 00 00 00 de 80 20 7f ..z#v... ..... .
00000010: f3 d6 b0 0a 7c 3c f0 0b 4c 72 67 4c 43 7c 37 4a ....|<.. LrgLC|7J
00000020: b1 7c 1a a0 4e b6 13 4f 85 da 66 a6 fd 5f 78 af .|..N..O ..f.._x.
00000030: fc 09 83 f8 b9 7a 4c 87 43 88 32 86 b3 80 51 40 .....zL. C.2...Q@
00000040: ba 22 91 86 f1 15 9a e2 ."......

libbde_aes_ccm_encrypted_key_read: nonce time : Mar 21, 2025 15:30:12.959000000 UTC
libbde_aes_ccm_encrypted_key_read: nonce counter : 32
libbde_aes_ccm_encrypted_key_read: encrypted data:
00000000: de 80 20 7f f3 d6 b0 0a 7c 3c f0 0b 4c 72 67 4c .. ..... |<..LrgL
00000010: 43 7c 37 4a b1 7c 1a a0 4e b6 13 4f 85 da 66 a6 C|7J.|.. N..O..f.
00000020: fd 5f 78 af fc 09 83 f8 b9 7a 4c 87 43 88 32 86 ._x..... .zL.C.2.
00000030: b3 80 51 40 ba 22 91 86 f1 15 9a e2 ..Q@.".. ....

libbde_metadata_entry_read: FVE metadata entry:
00000000: 1c 00 00 00 15 00 01 00 ........

libbde_metadata_entry_read: entry size : 28
libbde_metadata_entry_read: entry type : 0x0000 (Property)
libbde_metadata_entry_read: value type : 0x0015 (UNKNOWN)
libbde_metadata_entry_read: version : 1
libbde_metadata_entry_read: FVE metadata entry data:
00000000: 70 a3 12 8f c0 8e db 01 30 5b 7b 90 c0 8e db 01 p....... 0[{.....
00000010: 02 00 02 00 ....

libbde_metadata_entry_read: FVE metadata entry:
00000000: 7e 02 1e 00 1d 00 05 00 ~.......

libbde_metadata_entry_read: entry size : 638
libbde_metadata_entry_read: entry type : 0x001e (UNKNOWN)
libbde_metadata_entry_read: value type : 0x001d (UNKNOWN)
libbde_metadata_entry_read: version : 5
Unable to open: /mnt/CASE04/DDS2516/evidence/ORIGINAL/disk/E01.DD.
libbde_metadata_entry_read: unsupported FVE metadata entry version.
libbde_metadata_read_entries_data: unable to read metadata entry.
libbde_metadata_read_entries_file_io_handle: unable to read metadata entries.
libbde_metadata_read_block: unable to read metadata entries.
libbde_internal_volume_open_read: unable to read primary metadata block.
libbde_volume_open_file_io_handle: unable to read from file IO handle.
info_handle_open: unable to open volume.

Could you support this?

Thanks always for your help.

Choi

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions